Cloud IAM Association Module Automating Manager Instance Identification

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Identifying and designating the appropriate instance of an identity and access management system to manage a base instance in a cloud computing platform is laborious and time-consuming, especially when the scope of services varies regionally.

Innovation Solution

An association module determines the resident location of a base instance, identifies a manager instance associated with that location, and edits access settings to authorize the manager instance to access resources within the base instance, using manager identity data stored in an identification module.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Loss of time

If manual identification and designation of manager instance is performed, then accuracy of instance association can be controlled, but the process becomes laborious and time-consuming

Engineering Contradiction:

Improvetime for instance associationVSAvoidautomation of manager instance identification

Core Design Contradiction:

Loss of timeVSExtent of automation

Solution Approach 1:

The base instance automatically performs the identification and association of the managerinstance by executing the association module, which determines the resident location, identifies the managerinstance, and edits access settings without requiring manual intervention from the owner

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The association module performs preliminary actions by pre-determining the resident location of the baseinstance and pre-identifying the appropriate managerinstance before the actual association is needed, streamlining the overall process

Inventive Principle:

Principle #10Preliminary action

2Adaptability or versatility

If regional service scope variations are considered, then service availability can be optimized, but the complexity of identifying appropriate managerinstance increases

Engineering Contradiction:

Improveservice availability by regionVSAvoidcomplexity of managerinstance identification

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The system determines the resident location of the baseinstance and identifies the managerinstance specifically associated with that location, ensuring that services are provided with appropriate local quality and regional adaptability

Inventive Principle:

Principle #3Local quality

Solution Approach 2:

The association module acts as an intermediary between the baseinstance and the managerinstance, automatically handling the complexity of regional matching and access configuration without requiring the owner to manually navigate regional variations

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS20250110764A1Policy deployment and automation in a cloud-computing environment

Publication Date: 2025.04.03 INSIGHT DIRECT USA INC

AI summary

Instances of an identity and access management (IAM) system access resources through a cloud platform. An association module executed on control circuitry of a computing device is configured to determine a resident location of a base instance of the IAM system, obtain manager identity data for a manager instance of the IAM system associated with the resident location, and edit access settings for one or more containers within the base instance to provide access to the manager instance. The manager instance can access the one or more containers to service the resources within the one or more containers.